4db805c9f01c9d5def3e090250c08fca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4db805c9f01c9d5def3e090250c08fca
Size

76KB
MD5

4db805c9f01c9d5def3e090250c08fca
SHA1

66e85571cdf316a898176a18e37f5fd5558bc869
SHA256

3e233ba8fe570b5909e5c7081472b28c78ca43e959d4c11485a296f5dfc8727e
SHA512

2417f4ceb33492edac0283365a65b51cd4a5f1012f7b6973627101ba87d69daa03ff37128226e5c09ba6bd3d9a7ce69acfae6bccb09aa18c8d833e61aaee4381
SSDEEP

1536:wLJGCVraYmMqsTgFRxnoG2890UuEgpjVrs2ryrd1vUQuq6:U5tn7Q/oMuEgHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4db805c9f01c9d5def3e090250c08fca

Files

4db805c9f01c9d5def3e090250c08fca
.exe windows:4 windows x86 arch:x86

e22e84298f006ba7f9d669df2a128202

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileSectionA
FindFirstFileA
lstrcpyn
GetPrivateProfileStructA
CreateMutexW
GetVolumeInformationW
DecodePointer
CreateFileMappingA
OutputDebugStringW
OpenMutexW
ExitProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE